$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: 8OL9MLF3IzhL/kZWIRL/4guEyq4PrdOUq4fpE6ps2kc= Subject key identifier: 99:CF:ED:D1:E3:7F:28:26:F3:97:09:60:93:81:A1:D7:76:C3:0E:E4 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 389237F99202EFCF98DB2B00FEE4CDD035B13843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 01A8 Signing time: Sat 15 Nov 2025 18:41:49 +0000 Manifest this update: Sat 15 Nov 2025 18:36:49 +0000 Manifest next update: Wed 19 Nov 2025 05:34:49 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) 2: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: HSaClFE/xcOgFz14YCbL/uudaobqqnlRCPJBzffl/+k=) 3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 05:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:92:37:f9:92:02:ef:cf:98:db:2b:00:fe:e4:cd:d0:35:b1:38:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Nov 15 18:36:49 2025 GMT Not After : Nov 19 05:34:49 2025 GMT Subject: CN=99CFEDD1E37F2826F39709609381A1D776C30EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:01:2c:8d:54:b8:87:76:a6:b0:5c:75:64:a3: a5:6c:41:b9:0e:f4:de:cd:f9:62:75:18:36:40:08: 9b:b1:e4:a2:a0:90:47:d5:a4:6d:73:da:70:3d:4d: bd:10:99:bd:82:8c:b5:a4:a5:d6:67:7a:5f:27:0e: f1:1e:b7:2b:bc:b4:5d:27:5d:dd:4c:29:40:ea:10: 87:45:f2:e5:ea:89:19:40:15:7e:28:fb:37:06:45: 75:14:aa:13:e0:bd:c0:2b:8a:8c:f4:be:01:d9:05: 00:f8:99:9f:fa:8d:db:0e:07:ca:10:05:e4:bc:03: 19:4b:38:21:34:27:52:8d:38:8a:12:27:83:bc:01: 6b:0b:0f:47:52:83:a1:ef:86:6f:0f:fe:b6:22:29: 9f:b1:f9:eb:c3:b8:6b:2c:97:b8:25:69:3a:ad:fc: da:68:b1:76:a0:7a:cb:1c:24:e2:96:35:52:07:6a: 43:0e:c5:ef:6a:08:16:89:cf:d5:60:da:ce:95:49: ec:a2:95:7a:1e:26:20:7f:00:47:13:59:ca:93:95: 32:a1:85:10:00:c3:ba:f2:59:6b:92:b6:34:65:71: 1f:69:2d:03:93:8a:59:aa:a9:5f:63:35:26:7c:0a: a4:c3:8d:c6:48:12:b5:33:0e:d8:c1:f9:37:d3:73: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CF:ED:D1:E3:7F:28:26:F3:97:09:60:93:81:A1:D7:76:C3:0E:E4 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:81:d6:9a:6f:28:cf:8a:ea:cc:39:08:98:8c:0e:ed:a6:ad: f6:5e:49:4f:13:52:fc:ba:95:77:f6:e7:68:3c:34:b5:c7:15: 66:19:f4:54:1c:3a:20:b6:49:32:d2:a6:9e:19:ed:6f:7d:bb: c7:35:c3:49:a7:d3:4f:59:c7:35:eb:49:7c:c7:4e:b0:72:1a: 6b:2f:22:2b:48:f4:46:8c:99:5d:e3:5c:99:8d:31:6c:e6:58: 50:aa:59:fc:f7:02:ac:d6:89:f0:d9:93:61:59:91:81:08:c9: 8e:bb:61:a9:d4:d1:f9:ae:32:b4:74:13:3a:08:ec:cc:38:f5: 90:cb:7f:de:ab:c9:49:84:5e:0b:85:ff:41:da:c2:e8:a1:73: f8:fa:8b:23:e5:cb:71:ac:98:cb:15:01:cb:95:5c:79:53:95: 28:35:fe:2f:cd:08:78:24:86:7e:78:5f:90:61:1a:14:56:3f: 88:0c:c2:15:17:a7:ad:c8:4b:e4:c6:11:39:0a:97:73:07:08: c9:06:c1:02:e6:e1:62:39:9e:16:07:ca:d2:73:ef:3e:c7:6a: 0a:65:ac:9e:32:98:86:7d:ad:57:21:bd:31:31:ca:1c:96:44: 5c:13:87:bd:47:7c:b6:5a:db:20:bc:77:da:3a:b6:04:f7:f7: a0:6a:4a:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJI3+ZIC78+Y2ysA/uTN0DWxOEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTExMTUxODM2NDlaFw0yNTExMTkwNTM0NDlaMDMxMTAvBgNV BAMTKDk5Q0ZFREQxRTM3RjI4MjZGMzk3MDk2MDkzODFBMUQ3NzZDMzBFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlASyNVLiHdqawXHVko6VsQbkO 9N7N+WJ1GDZACJux5KKgkEfVpG1z2nA9Tb0Qmb2CjLWkpdZnel8nDvEetyu8tF0n Xd1MKUDqEIdF8uXqiRlAFX4o+zcGRXUUqhPgvcArioz0vgHZBQD4mZ/6jdsOB8oQ BeS8AxlLOCE0J1KNOIoSJ4O8AWsLD0dSg6Hvhm8P/rYiKZ+x+evDuGssl7glaTqt /NposXagesscJOKWNVIHakMOxe9qCBaJz9Vg2s6VSeyilXoeJiB/AEcTWcqTlTKh hRAAw7ryWWuStjRlcR9pLQOTilmqqV9jNSZ8CqTDjcZIErUzDtjB+TfTc1qRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmc/t0eN/KCbzlwlgk4Gh13bDDuQwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCB1ppvKM+K6sw5CJiMDu2mrfZeSU8TUvy6 lXf252g8NLXHFWYZ9FQcOiC2STLSpp4Z7W99u8c1w0mn009ZxzXrSXzHTrByGmsv IitI9EaMmV3jXJmNMWzmWFCqWfz3AqzWifDZk2FZkYEIyY67YanU0fmuMrR0EzoI 7Mw49ZDLf96ryUmEXguF/0Hawuihc/j6iyPly3GsmMsVAcuVXHlTlSg1/i/NCHgk hn54X5BhGhRWP4gMwhUXp63IS+TGETkKl3MHCMkGwQLm4WI5nhYHytJz7z7Hagpl rJ4ymIZ9rVchvTExyhyWRFwTh71HfLZa2yC8d9o6tgT396BqSi8= -----END CERTIFICATE-----Generated at Mon Nov 17 12:00:50 2025 by rpki-client